The same sort of thing can happen when capturing over a remote connection, e.g., SSH or RDP.ħ.9.3. IP Name Resolution (Network Layer) You might run into the observer effect if the extra traffic from Wireshark’s DNS queries and responses affects the problem you’re trying to troubleshoot or any subsequent analysis. As a result, each time you or someone else opens a particular capture file it may look slightly different due to changing environments.ĭNS may add additional packets to your capture file. The resolved names might not be available if you open the capture file later or on a different machine. Wireshark obtains name resolution information from a variety of sources, including DNS servers, the capture file itself (e.g., for a pcapng file), and the hosts files on your system and in your profile directory. The name is also not found in Wireshark’s configuration files. Unknown by the name servers asked, or the servers are just not available and
0 kommentar(er)
